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I REAL PARTY IN INTEREST (37 C.F.R. § 41.37{c){l)(i)) 

The reai party in interest in this appeal is McAfee, Inc. 
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II RELATED APPEALS AND INTERFERENCES (37 C.F.R. § 41.37(c) 

With respect to other prior or pending appeals, interferences, or related judicial proceedings that 
will directly affect, or be directly affected by, or have a bearing on the Board's decision in the 
pending appeal, a prior appeal was noted on 12/12/2005 in the present application. 

A Related Proceedings Appendix is appended hereto. 
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01 STATUS OF CLAIMS (37 C.FJL § 4137(c) 

A. TOTAL NUMBER OF CLAIMS IN APPLICATION 

Claims in the application are: 1-2, 4-8, 10-16, 18-22, 24-30, 32-36, and 38-46 
EL STATUS OF ALL THE CLAIMS IN APPLICATION 

I . Claims withdrawn from consideration'. None 

2 Claims pending: 1 -2, 4-8, 1 0-16, 18-22, 24-30, 32-36, and 38-46 

3. Claims allowed: None 

4. Claims rejected: 1-2, 4-8, 10-16, 18-22, 24-30, 32-36, and 38-46 

5. Claims cancelled: 3, 9, 17, 23, 31, and 37 

C. CLAIMS ON APPEAL 

The claims on appeal are: 1-2, 4-8, 10-16, 18-22, 24-30, 32-36, and 38-46 
See additional status i nformation in the Appendix of Claims. 
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IV STATUS OF AMENDMENTS (37 C.F.R. § 41.37(c)(I){tv)) 

As to the status of any amendment filed subsequent to final rejection, there are no such 
amendments after final . 
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V Sis M MARY OP CLAIMED SUBJECT MATTER (37 C.F.R. § 4U7(c}(l )(v» 

With respect to a summary of 01 aim 1, as shown in Figures 2-3 et al., a computer program 
product comprises a computer program operable to control a computer to generate banned 
program identifying data indicative of at least one computer program to be banned from use 
The computer program comprises user controlled program specifying logic which is operable to 
specify at least one computer program to be banned from use <e g. see item 14 of Figure 2. etc. ), 
where at least one computer program comprises a non-virus computer program. Further, the 
computer program comprises banned program identifying data generating logic which is 
responsive to the user controlled program specifying logic in order to generate banned program 
identifying data for at least one computer program to be banned from use (e.g. see item 16 of 
figure 2, etc.) The banned program identifying data is operable to control anti computer vims 
logic to identify computer programs banned from use (e g see item -10 of Figure 3. etc.) hi 
addition, the ami computer virus logic identifies computer viruses (e.g. see item 32 of Figure 3, 
etc.) prior to identifying the computer programs banned from use (e.g. see item 40 of Figure 3, 
etc.). See, for example, page 2, lines 9-19; page 6, lines 19-21; and page 8, lines 1 1-12 et al. 

With respect to a summary of Claim 7, as shown in Figures 2-3 et al., a computer program 
produci compnses a compuiei piogiam operable to conitol a compuiei to ban from use at least 
one computet progiam I he at least one computet progiam comprises a non-virus computer 
pfotuam The computet piogram compnses ami computer \uus logic, which in lesponsne to 
use? generated banned ptogtam identifying data for at least one compuiei piogtam to be banned 
itom use (e g see item i4ofFiguie2 ck ) moidci toidentifx compuiei piogiams banned from 
use (e e see item 40 ot hgme 3. etc ) l-uither, the ants compuiei \ uus logic identifies computet 
\uuses leg see item ^2 of hguie v etc ) prior to identifying the computer piogiams banned 
itom use <c g bee itun 40 of Figuie i etc } See, lot sample page 3 Iuks 20-2^, page o, hues 
1 0-2 1 . and page 8 lines i 1 - 1 2 et al 

With jespect to a summarv of Claim 15, as shown m figures 2-3 et al , a method of generating 
banned ptogiam tdenufung data indieatne of at least one comnuki piogtam to be banned (torn 
use 3 he method compnses the step of the usei specifying at least one computet ptogiam to be 
banned from use (e g see item 14 of hgme 3, etc), where at least one computet piogram 
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eompnses a non-Mais computer progtam Furthet, the method eompnses the step ot generating 
banned piogiam identifying data lot at least one computei progtam to ht, banned fiom use {eg 
.see item io of f igure 2 etc ) The banned piogram identifying data is operable to conUol anti 
computer \irus logic to identify computer progtams banned fiom use (eg sec item 10 of tigmc 
i etc ) In addition the anti computet \trus logic identities computer \uuses (e g set- item ^2 nf 
I iguie 1 etc ) prior to nkntthmg the computei piograms banned itom use (eg see rtem 40 of 
f tgure 3, etc > See, for example, page 2, lines v-i^, page <k lines \ and page K lines U- i 2 
etal. 

With respect to a summars of Claim 2i as .shown in figures 2-1 et a! a method foi banning 
from use at least one compute! piogiam comprising a novs- 1 * mis computet piogram The method 
composes the »tep of in tesponse to tecening usei genet ated banned prom am identifying data 
foi a.t least one computei progtam to be banned fiom use (eg see item 14 of figure 2 etc) 
opeiattng anti computet \ irus logic to identify compute! prog! ants banned fiom use (e g see item 
4u of 1 iguie i etc ) for tnggeung a banned piogram actum (e g see item 44 of figure \ etc i 
1 utthei the anti computei mius louic identifies computei mi uses (eg see item ?2 of f rgure \ 
etc ) prtot to identifying the computet piograms banned from use fc g see item 40 of} mure 3, 
Ue ) St.e. foi example, pagt. \ luus 2o-2\ page 4 lines ^-0 page o. lines 10-21. and page X 
lines 1 1-12 et al. 

With sespeet to a sum man of Claim 2° as shov,n m J i times 2-1 ct al , an appatatus foi 
genctatmg banned progtam identifying data mdicatne of at least one computet progtam to be 
banned horn use comprises a usei eontioiled piogram speuliei opeiahle to specif} at least one 
compute! piogram to be banned horn use <e g see item 14 of figure 2. etc ) \sheie at least one 
computer progtam compmes a non-Mats computei piogram further, the appaiatus composes a 
banned piogram identifying data generatot y\hieh is iespousi\e to the user controlled piogiam 
specific) in order to generate banned progtam identify ing data foi at least one computer piogram 
to be banned fiom use <e g see item io of f igure 2. etc > 1 he banned piogram identifying data 
is operable to contiol ami computer smis lome to i dentin computei progtams banned fiom use 
feg see item 40 oi Ftgute >. Ue ) hi addition the anti compute! \ttus los/ic identifies computei 
vttttses (eg see item 32 of 1 igtite 1 etc ) pnoi to tdentif\ii)g the computei piogiams banned 
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from use (e.g. see item 40 of Figure 3, etc.). See, for example, page 2, lines 9-1°, page 6, lines 
1.9-2 1 , and page 8, lines 1 i -1 2 et a! 

With respect to a summary of Claim 35, as shown in Figures 2-3 et al., an apparatus for banning 
ftom use at least one computet pios/witn com puses a non-urus computer ptogram The 
appaiatus comprises an antt computet \ nus s\ stem winch is response e to user genet a ted banned 
ptogmm ideutifvuig data for at least one computet ptogram to be banned ftom use fe g see stem 
14 of hgure 2. etc K m oidei to identtfs computet pioaiams banned from use te g see item 40 of 
riguie i etc ) Futther the atiti computet wins swem identifies computet \ituses{eg set- item 
32 of 1 fguie 3 etc ) prior to rdentfhfng the eomputei programs banned ftom use te g see item 
40 of ! iguR etc ) Set- fot example, page > lines 20-2x page t\ lutes t<>-2 i and page 8. lines 
il-12et.al. 

Of course the abo\e cttattons aie merel\ examples oi the abo\e claim language and should not 
be construed as limiting hi am mannet 
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VI GROUNDS OF REJECTION TO BE REVIEWED ON APPEAL (37 CF.R. § 
4i.37(cHi){vi» 

Following, under each issue listed, is a concise statement setting forth the corresponding ground 
of rejection. 

issue # I: The Examiner has rejected Claims L 4, 7, 13, 15, 18, 21, 27, 2% 32, 35, 41, and 45 
under 35 U.S.C 102(b) as being anticipated by Kephart (U.S. Patent No. 5,452,442). 

issue # 2. The Examiner has rejected Claims 1, 4, 7, 13, 15, 58, 21. 27, 29. 32, 35, 41, and 45 
under 35 U.S.C. 103(a) as obvious over Kephart (U.S. Patent No. 5,452,442). 

Issue U 3: The .Examiner has rejected Claims 2, S, !6. 22, 30, and 36 under 35 V S C. 103(a) as 
being unpatentable over Kephart (U.S. Patent No. 5.452.442). in. view of S/.or ("Bad iDE.VT in 
further view of Simpson ("Cryptography in Everyday Life"). 

issue # 4: The Examiner has rejected Claims 5, 19, and 33 under 35 U.S.C. 103(a) as being 
unpatentable over Kephart (U.S. Patent No. 5,452,4-121 in further view of Veldnu-m ("Heuristic 
Aim- Virus Technology'). 

Issue # 5 The Examiner has rejected Claims 10, 24, and 3S under 35 U.S.C. 103(a) as being 
unpatentable over Kephart <U S Patent No. 5,452,442), in view of Szor ("Bad IDEA"), in view 
of Simpson ("Cryptography in Everyday Life"), and in further view of Davis (U S Patent No 
5,844,986). 

Issue ii 6. The Examiner has rejected Claims 1 1-1.2, 25-26, and 39-40 under 35 U.S.C 103(a) as 
being unpatentable over Kephart (U.S. Patent No. 5,452,44.2), in. view of Symantec ("Norton 
Antivirus User's Guide"). 

Issue -/ "* The FxamitiL'i has t ejected Ciatms (i 14, 20 .78, i4 and 4.7 under ^ I S C lO^a } as 
being unpatentable Ovet kephait (US Pateru No * 452 442) in Mew of McGet; et al {I S 
Patent No. 6,694,434). 
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Issue # 8: The Examiner has rejected Claim 43 under 35 U.S.C. .103(a) as being unpatentable 
over Kephart (U.S. Patent No. 5,452,442), in view ofLavasoft ("Ad-aware"), and in further view 
of Fuller et al (U.S. Patent No. 6,216,112). 

Ksue ( > The L^ammet has i ejected Claim 44 mules I S C Kn<a> as being unpatentable 
o\ei kepliau (I S Patent \o \452 442) m \ ie\\ of L,i\asoft < 'Ad-awaie ). m wew of I idler et 
al a S Patent \o o2l(> \ \2) and m tuithei view <>f Bi«>\\u et ai U !> Patent No \^<V>o8) 

issue Jl if* The 1 \ammei kas j ejected ( latm 46 under "?5 1 S C ](*>(<)) as benu; unpatentable 
o\cr Kephau (T S Patent \o ^ 4^2 442) and in further \ie\s of Golds U al {I s Publication 

No. 2001/0020245). 
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VII VRG C >1 K \ V (37 C.K R.§ 4 U7<e)< 

1 he claims of the gioups noted below do not stand or fail togethet In the pit-sent seajon, 
appellant explains whs the claims of each tiioup ait believed to be sepaiatcis patentable 

issue g 1 : 

Ihe fcvtmincr lias rejected Claims 1, 4. 7, 1 }, is, 18, 21, 27, 2<>, *2, ^, 41, and 4S undci ^ 
t SC. I 02<b> as being anticipated b\ kephaittl S Patent \o \4^-442} 

(jfoup ! Claims ! 4. " /5, AW 2/, 29 32 *W35 

With inspect to the independent Uaims the Fviminei has tehed upon an mherenes aigumefit 
with iespeet to the Kephatt lefeience to make a prior art showing of appellant's claimed 
technique \\hetem the unti compute! vtius kmc identifies compute! wuises prior to identifsmg 
the computet pstiiiiums banned from use (see this or similai. but not neeessaitis identical 
language in the independent claims) 

In icsponse appellant asserts that "[tjo establish tnheiencs, the extimsic evidence 'must nuke 
cleat that the missing deseuptise mattei is neeessauh piesent in the thing described m the 
tefeit'iicc, and that it would he so iccognized b\ pei sons of or dinars skill Inhcicncs however, 
mas not be established In payabilities <n possibilities The mete fact that a eettam thing mas 
icsult iiom a gf\en set oi circumstances is not sufficient "' h) n koheir^oti io° j >d 74"* 74^ 
40 { SPQ2d J94« l"5o-M < |-ed ( it I'W) 

Speetikvilh, appellant lespectfulK assetts that Col ^ hues^T-ol from kephart meieh discloses 
that 1 the usei supplies either {a} a file containing a list of suits signatures to he evaluated or (b) 
one or tnote Hies, eaeh containing one ot moie pottiotis of mv a; tant v a al code from which one or 
more virus signatures ase to be e\ti acted 1 " < emphasis added) CStarls, kcphait s disci osute of 
using one or mou portions of invariant sttal eode to txtraet mi us su.natutcs, fails to even 
suggest d technique * whetem the antt computet \uus logic identifies computet \uuses prior to 
identity ing the computei pio^iams banned from use (emphasis added) as claimed bv appellant 



In addition dppellant respectful k asserts that Kephdit discloses that " [ijii the evaluation mode 
the pioeeduie statts with a given list of candidate si&natutes, one oi nune fot each vuuV 
(emphasis -added) kcphart furthet discloses thai the invention has been desatbed above m the 
context methods and apparatus fot ey aluatim? and extracting smnatutes of computer viruses 
diui olhet undesirable sottvvare entities' (Col 18 hnes J 7-20 emphasis added) However, 
Kephdit s disclosure of usmu a list of candidate su>natujes jn the evahiatton mode tor both 
computei vnuses and othei undesirable software entities h'mhe\ mun fiom appellant'* claimed 
technique "wherein the ami computer virus iogn. identifies computer \ imses prior to identify 
the computei programs banned from use" (emphasis added) as claimed since the same 
evaluation mode m kepha.it is used for both computei viruses and othei undesuahle sothvaie 
entities without anv indication of osdci 

Thus there is ahsolutelv no evidence in the Kephait reference that makes it clear thdt such 
missing dcsciiptive mattei is ntxessaiilv present in the Kephdit svstem In fdd these is even 
evidence to the conoaiv In view of the aiguments made heicmahove, am mhciencv argument 
has thus been adeqtiateh rebutted, and a notice of allowance or a specific prior ail showing of 
such claim k amies, m combination wtth the lemaimntr claim dements is Rspeetfuih requested 
(See MPEP 2112) 

In the Office \ction mailed <N 12 20tV> the Lxaminei has argued that since kephait's invention 
identifies both yirus and non-vutis (piosnams banned trom use), it is an inherent feattite of the 
Kephdit mv ention if run more than once to identilv a piogiam banned from use alter identifv my 
a virus Fuithei the f'\ammei has aiytfed that 'even if on each pass thiough the signatme list, 
the \iruse» weic checked ia»t. on the next i mining of the eheckei, the piogiam will have 
identified the banned programs after the previous identification of \n uses " 

\ppellam lespectfulh disagrees and asseits that kephart merek discloses that 'the invention has 
been desa ihcd in the context of methods and apparatus tor evaluating and extracting signatmcs 
of computer viruses and othet undesuabte software entities' t< ol kS hrus P-20 - emphasis 
added) 1 lovvevei there is no indication from the cited excerpt that on the next lunmng of the 
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eheeker, the- ptogfam v. til iw\e identified the banned ptogfams aftes the pteuous identification 
of uruses " as stated In the iAammei 

Furthermore, the Examiner has generated a hypothetical situation that is simply not addressed in 
the kephatt i defence In f espouse, appellant as^etts that the fact that a certain icsulf <n 
ehataetuisne ma\ oeeui 01 he piesenf tn the pnoi ait is not sufficient fu establish the niheiencs 
of that lesult ot char acta tstic hue Ri/UiMf sH'.uilMi 2R LSPQ2d joss ios- (fed 

Cir bw^i /» >e (h/nJh oo*> h 2d ^7i>, ^Sl-i>2 2 i 2 I SPO ^2? ^2o ((. ( P \ 1<>K1 ) Thus, it is 
not mherent ni kepliatt to Idenufhvj u>mputef utuses prior to fdent:l\:ng the eomputet 
ptograms banned ifom u\e t emphasis added) as chinned b\ appellant 

in addition m the Office Action ntaded *■> 12 2006 the bxaminer has astzued that 'one of 
otdinais skiU m the art would lu\e been motivated to pnontt/e the idcfUitlc.au on of sifuseb 
before identify mg the computet ptugiams banned from use because it is well known to sdentifs 
the most se\eie thteat.s fust hist tt appeals that b\ meviporattng an ob\jousries.s-wpe 
aigument, the txammer is improper K appKmg the puma fane case of obuousness in the 
coute-a of a rejection undet ^ I S 0 102(b) 

1 utthef appellant respurtluih dtsagiees wit!) such aigument and assefts that simpls nowhere m 
Kephatt is thete anv diselosuie of diffeitng degiees ot se\ent\ between the identification of 
\fruscs and the identification of banned computet piograms fo this end the puoi ait does not 
e\en teach the problem snhed b\ appellant See / //v/ Ptoic^ ( V> v Mtittwota << (hihttiu 
Paper Co., 261 US 45 (1923). See further arguments addressing 103(a) rejection below in the 
context of Issue #2. 

Again. Kepi. tart 'a mere disclosure of " evaluating and extracting signatures of computer viruses 
and other undesirable software entities " (Col 18. lines 18-20 ■■■ emphasis added), in no way 
suggests or renders obvious "identif[ying] computer viruses prior to identifying the computer 
programs banned from use" (emphasis added), as claimed by appellant. Thus, in view of the 
arguments made hereinabove, any inherency argument has thus been adequately rebutted, and a 
notice of allowance or a specific prior art showing of such claim features, in combination with 
the remaining claim elements is respectfully requested. (See MPBP 2112) 
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The Examiner is reminded {hat a claim is anticipated only if each and every element as set forth 
in the claim is found., either expressly or inherently described in a single prior art reference. 
Verdegaai Hros. v. Union Oil Co. OfCa/iJbrma., 814 F.2d 628. 631, 2 USPQ2d 1051. 1053 (Fed. 
Ctr 1987} Moreover, the identical invention must he shown in as complete detail as contained 
in the claim. Richanhoti w Suzuki Motor Co. 868 F 2d 1226. 1236, QUSPQ2d 1913, 1920 ( Fed. 
Ctr. 1989). The elements must be arranged as required by the claim 

The foregoing anticipation criterion has simply not been met by the above reference. 

Group #2; Chirm 13, 27, ami 4/ 

With icspcct to CI dims i t. 2", and 41, the Examiner has idied on Co! I, lines "5^-40. and Col 2. 
Sines 5-12 front Kephart to make a prtoi an shovsmg of appellant's claimed technique 'whereat 
said arm computer wins logic is executable as a sepaiate instance soleh to identifv computer 
programs banned from use:' 

A v xdely-used method for the detection of computer viruses and other 
undesirable software e titiet. is knowi as a ccamer > 



Appellant lespcUfulh tssuts th tt the c\.<_erpt\ from keph trt tdiui upon b\ the I \ammu inereK 
disdost, that j t i] width used method lot the dekUjon ol lOtnputci suuses and other 
undcsniblc oft u ah entities is known as <i scamm (tmphisis added) Ho-wesa the mue 
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diseiosuie that a scannet detects computet \uuses and othci undeniable software entities as m 
Kephaii simpb i:uh to e\en suggest a tedmuiue ' whet em said anti computer \nus logic is 
executable as a sepaiate instance sol eh to uientih eomputei piogjams banned from use' 
(emphasis added) as claimed b\ appellant 

In addition appellant lespeetnills notes that in the Office \enon mailed f > 12 200b tin. 
I'vammei has e\en admitted that Kephait mheienth teaches that 1 the second execution will base 
identified non-smiscs aftei unties because it identifies both each time' Usee paac <> of die Office 
\euoii-tmp3iasis added) Cleath, identthmg both iion-\mises and \mises during each 
execution oi a progiam, as admitted b\ the I \animei does not meet and e^en /t^Z/t's (nun 
from appellant s claimed teehnu|ue '\s herein said ami compute; ssrus logie is executable as a 
sepaiate instance soteh to identity computer psoeiams banned tk>m u&c " (emphasis added) as 
claimed. 

Again, the foregoing anticipation criterion has simply not been met by the above reference. 
Group $3: Claim 45 

With respect to ( laim 45 the LXammer has relied on Col 5 hn.es s~-M iiom the kephait 
icfeienee, and an inherency argument to make a pnor art shoeing of appellant's claimed 
technique ' whet em die antt computet \trus logic of a pluialttx of end uscis each includes a 
diffeient sek-eted set ot eomputet pjogtams banned from use ' 

Appellant lespectfullv asserts that the excespi from kephait. lehed upon b\ the rxammei to 
make tlte fosegomy inherency asuumetn, mere!) discloses thai 1 [i]n a first step, the use? supplies 
eithet (a) a. file eontammg a hst of \nus stgnatuies to be e^ aluated oj (b) one oi mo?e files, each 
containing one or more portions of imatiam \ual code Horn v\ hich one ot moie \ nus signatuies 
are to be extiacted ' (emphasis added) f uither, the bxamuiei has aigued that ' it is an mheieni 
teatuie of kephart that each end uset ami computet \ irus logic includes a different selected set of 
computer programs (user-selected signatures) banned from use." 
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Appeilant n_speetfuli\ disamees and asserts that kephait merdx discloses that the user supplies 
cine 4)i moie files, each containing one oi more poittons of in van ant vital code' (unphasis 
«iddt;d) HowcNcr, nureK disclosing that the ust-i ma\ suppK one oj mote files containing 
portions of m\ anant \ na! code, as m kephait fads to o en suggest a technique whcicm the arm 
computet \ttus logic <tf a plutaliK of end users each includes a different selected set of computet 
programs banned horn use ' (emphasis added t, as claimed b\ appellant CleatK iu\ anant ural 
code, as in Kephait, fads to suggest 'a different selected set of computet piogiams banned horn 
use" (emphasis added), in the manner as claimed In appellant 

in \iew of the aiguments made heretnatxne am sueh mheienes argument has been adetiuateh 
rebutted and a notice of allowance 01 a specific puot art show ma of such claim features, m 
combination with the remain ma claim elements is respectfuih requested (See VIPFP 2112) 

Again, the foiegumg anticipation criteuon has sintph not been met b\ the abo\e refen,nce 

Issue # 2: 

The Examiner has rejected Claims 1, 4, 7, 13, 15, 18, 21, 27, 29, 32, 35, 41, and 45 under 35 
U S C. 103(a) as obvious over Kephart {U.S Patent No. 5,452,442) 

Group :V I: ( '/aims L l 7, J 5. IK 21. 29, 32. ami 35 

With respect to the independent claims, the Examiner has relied upon an inherency argument 
with respect to the Kephait reference to make a prior art showing of appellant's claimed 
technique "wherein the anti computer virus logic identifies computer viruses prior to identifying 
the computer programs banned from use'' (see this or similar, but not necessarily identical 
language in the independent claims). 

In response, appellant asserts that "ft)o establish inherency, the extrinsic evidence 'must make 
clear that the missing descriptive matter is necessarily present in the thing described in the 
reference, and that it would be so recognized by persons of ordinary skill. Inherency., however, 
may not be established by probabilities or possibilities. The mere fact that a certain thing may 
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resuit from a given set of circumstances is not sufficient.'" fit re Robertson, 169 F.3d 743, 745, 
49USPQ2d 1949.. .1950-51 (Fed Cir. .1909). 

Specifically, appellant respectfully asserts that Col. 5, lines 57-61 from Kephart merely discloses 
that * the user supplies eitbet {a) a file containing a list of wuis signatures to be evaluated or ib) 
one oi mote files eat It containing one oi iiior pottions ol imananl wtdl code liotn which one oi 
mote wins smnatuies ate to be extracted' < emphasis added) ( leads Keph.n t s disdosute ot 
usiny erne oi mote potuons of tn\ at tant \nal code to extract wtus signatures, fails to e\en 
suggest a technique therein the aim u>mputei wins logic identifies computer wriises prior to 
idenMiwmg the computer programs banned ft om use (emphasis added ) as claimed b\ appellant 

in addition appellant tespectfulh asserts that kephart discloses that v fj)n the euiluatmn mode 
the procedure starts nub ,t gi\en list of candidate signatures, one or more for each xnus" 
(empha^s added > Kephatt luithet discloses that 'the tin enuon has been desenbtd abo\e in the 
context ot methods and apparatus fot evaluating and extracting signatines of computer wtuses 
and othft undc suable softwaie entities" (( ol IS lines I "-20 emphasis added) Hov\c\ei, 
kepharfs dtseiosutc of using a list of candidate smnatutes m the evaluation mode fot both 
computet \ muses and other undest table soitwaie entities tauhes ima\ from appellant's churned 
technique 'vshereiti the anti computet v nus logic identities computer \ mtses |mor to identifying 
the computet progtams banned Worn use' (emphasis added), a» claimed since the same 
evaluation mode m Kephatt is used lot both computer wtuses and othei undesnable snhwaie 
entities without an \ indication of unlet 

j hus theie ss absoluteU no evidence jn the Kepha.it reference that makes ft cleat that such 
mtsbtng desctiptne matter ts necessarily present in the Kephait ssstem In fact there is even 
eudence to the couhatv In view of the aiguments made hetemahove, din iiiheiencs .tiguiiient 
has thus been adequateh rebutted and a notice of allowance ot a specific pnor art showing of 
such dami features, tn comhmation \\Uh the temainmg daim elements is lespeetfulK tequested 
(See MPEP 2i m 

In the Office Action mailed 00 12 200o the l\dtniner has aiguud that v since Kephatt's invention 
identities both wius and iion-wuts (ptogratns banned fiom uset, tt is an inbeient featme of the 
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kephait msenuon, if sun mote than once, to idenufs a piogtam banned fiom use aftet ideutifsmg 
a mius " Kinkt'i the Ps-amuier has digued that ' esui if on each pass thiough the signattiie hst 
the xmtses were cheeked last, on the next running of the checker, the piogram ssdl ha\e 
identified the banned progjams afto the picsious identification of \fruscs 

\ppeihiiit respectfullx dtsagtees and asses ts thai kephatt meteh disdoses that the invention has 
been described m the come -a of methods and apparatus fot e\ aluaung and extracting signatures 
of computer suites and other undesuabie software entities" {Col 18, imcs 17-2<> emphasis 
added) Hcnve^ ei, thete is no indication fiom the Cited e\eeipt that "cm the ncM tunning of the 
checkei the piogiam will have identified the banned piogiams after the piesious ulentisj cation 
of viruses," as a lleged by the Examiner. 

fur men-note the f\ammei his s>eneiated a hspothetie.il situation that is simph not addtessed m 
the kephart reftfiuiix. In it-sponsx appellant asserts that the fau that a cuum tesuh 01 
charaeteiistic mas occur oj be present m the pnoi art is not sufficient to establish the mhejencv. 
of that result or chaiaeteiistic Inn Ruikaen ^ Y id \^\ 28 I SP02d l f ^7 (I til 

fii N<>?) hmOchhh o<* V 2d ^M-H2 21 2 \ SPQ Co (TCP \ I^S) Thus it is 
not tnheiem m kephart to identify] computes viruses prior to identifying the computer 
progtams banned fiom use 1 (emphasis added t as claimed bs appellant 

Watn, kephatt s mete disck>sufe of evaluating and extracting -.ignatute-. ol computer suu-.es 
and othei nndesiiabie soitware entities' (i ol IS lines i 8-20 emphasis added) in no was 
suggests or tendeis obvious ' identify mu.} compute! uruses prior to identifying the computer 
progtams banned fiom use" (emphasis added) as claimed b\ appellant Htciefoic m view of 
the diguments made heiemabo'. e, am mhetencv aigument has thus been adecjuateh tebuUed, 
and a notiee oi aliouanee o; a speeifie prior ait showing of such d iim featutes m eoiiibination 
with the iemammg elaim elements is icspeuiullv tequested < Nee MP* P 2 M 2) 

In addition m the Office \ction mailed " 12 20<>o, the bsamusei has argued that l oue of 
ordmatv skill m the ait -would h m. been mo ti sated to ptiojiti/e the identification oi \ mists 
hefoic identifsiirg the computet progiams banned fiom use bt\,ausL it is well knovsn to identifv 
the most se^eie thieats fust \ppeliant lespeettulK disagrees with such aigument and asseits 
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that simply nowhere in kephart is there any disclosure of differing degrees of severity between 
the identification of viruses and the i den tifi cation of banned computer programs To this end. the 
prior art does not even teach the problem solved by appellant. See hibci Process Co. v 
Minnesota A- Ontario i'apcr ( *<> , 26 1 US 45 f 1923). 

Further, in order to establish a prima facie case of obviousness where the advance in the art lies 
in the dtseoveiv ot the pioblem oi souice of the pioblem as hete the £<vtrmnei must pioude 
e\jdence that a peison of ordinarv skill tn the art at the time of the piesent invention would have 
expected a pioblem to exist As noted bs the t-ourf m /// Re \<w//n/, SO 1 ) F 2d ">6<>, ^72, IS4 
V<VO<^ 012 fCCTA i^7^> 

[\\ here] these is no e\ idenee of tecord that a peison of oidiuasv skill in the ait at the time 
ot [an appellant sj invention would ha\e expected [<i pioblem] , tt is not piopet to 
conclude that [an mention] which solves this pioblem would ha\e been obvious to 
that hvpothetic.il peison of oidtnan, ski It tn the ait The significance ot evidence that a 
pioblem was known in the pnoi an is. of course, that knowledge of a piobkm piovides a 
icason oi motivation for workers m the art to appK then skill to its solution 

Absent such evidence m the tecoid and a piopei tejection undei "55 ( S C i 03(a) the lejection 
based on the Kephatt refeience cannot stand 

To establish a puma lane case < if obviousness, thiee basie cuteria must be met hrst, theie must 
be some suggestion ot motivation enhei m the leleiences themselves oi sn the knowledge 
geneiallv available to one ot oidmatv skill in the art. to modtfs the leterenee oi to combine 
icfcience teachings Second, theie must be a icasonable expectation of success hnaily, the 
ptiot ait ietuence (ot Jefeiences when combined) must teach or suggest ail the claim limitations 
The teaching or suggestion to make the claimed combination and the reasonable expectation of 
success must both be found in the pnoi ait and not based on appellant s disclosure In w 
I'aeJtQ 17 t 2d 4«8. 20 I S]'02d 1 List (ted Cn vm ) 

Appellant respectfulK asseits that at least the fust and thud elements of \h<z prima fane case of 
ob\ jousness hav e not been met, as noted abm e 
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Group it 2; Claims 13, 27, and 41 

With Et-spca to ( laims 1 \ 27 and i i rhc t \aminei has iclied on t ol i hncs >5- i", and f VI 2, 
lines v!2 fiom kephart to make a pnoi att shmung of appellant's claimed technique "whet em 
.said anti computet muis logic is executable as a separate instance soieis to identif\ computet 
programs banned irom use. ' 

A wxdely-iised method for the detection of cornputer viruses and other 
undesirable software entities 3.s knovn as a scanner > - - v. 



\ppellant lespeUiulh asserts that the excetpts horn Kephatt relied upon b\ the i famines meieh 
disclose that [a | wideh-used method for the detection ot computet \uuses and othei 
undesirable somsate entities is kno^n a a scannet (empha is added* Ho\\e\u the mere 
disclosuic that a scanner detects computer m ruses and 'Uhtt undestiabk sottuate entities as m 
kephait smiph tails to e\cn simgest a technique \\ herein said anti computet situs I ouj c ts 
esecuttble as a septate instance soleK to tdentih computei piogums banned horn use 
(emphasis added) js i latnttd b\ appellant 

in addition appellant lespectiulh notes that m the Oiike Vctton mailed ° 12 2<Vio the 
1 vinnnei hasten admitted that kephatt tnhesenth ieaches {hat the second execution wiil ha\e 
identified non-\ iiu-.es aftet \truses bceause u identifies both t Kh time' (see page o ot the ottkc 
\etiofi~empha ts added) ( learh tdeiHif\mg both fion~\ uuses and \nuses dntmg each 
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exeenirun ot a progtam, as note J b\ the n\atmner, does not meet, and even h'nchjs <»<ia (torn 
appellant s claimed technique 'whet em said arm computet utus logic is executable as a sepaiate 
instance soiel> to uienUl> computet progjams banned from use ' (emphasis added), as claimed 

Again appellant tespectfulh asserts that at least the first and third elements of the pn/}>a hu ie 
cast. of obviousness ha\e nut hei.ii met as noted above 

Group H3: Claim 45 

With tespea to Claim 4*> the \ \amtnet has iched on Col lines from the Kephart 

refetetice, and an inherencx argument to make a prsor art slummy of appellant s claimed 
technique \vhetem the ants eomputei \uu» logic of a pluraltts of end u»eis each includes a 
dttierent selected set of computer piugrams banned fiom use 

Vppellam lespeetfulh asserts that the e\cetpt iiom kephait, relied upon b\ the i \ammet to 
male the foiegomg mheteno, aigument meteK discloses that |i|n a fust step the use; supplies 
either fa) a file containing a list of suns sumattnes to he e\ abutted ot (b) one oi moie Hies each 
containing otic ot mote portions oi invariant viral code from which one or mute virus signatutes 
aie to be estracted" (emphasis added) I uitbet, the I >ammer has aitiued that 'it ss an inherent 
feature of kephart that each end user ami computet \ irus logrc includes a drffetem selected >et of 
computes piomams (use i -selected si gnatuiesi banned ftom use 

appellant respecdulh dfsagices and asserts that Kephait merelv discloses that the uset supplies 
'one ot moje tiles, each containing one oi mote portions of t ns an at it m ral c od e ' (emphasis 
added) Howexet met eh disclosing that the uset ma\ supph one or mure illes containing 
pot ttons of im arrant <■ nal code as m kephart fails to even suggest a technique 'uherem the anti 
computet virus logic of a plutdlftx of end usets each includes a dtffetem selected set oi computet 
ptograms harmed from use- (emphasis added), as claimed b\ appellant Heath tnvanam \ ttal 
code, as in kephait, fails to suggest a drffeient selected set of compute! piogtams banned fiom 
usC (emphasis added) m the ruaunet as claimed h\ appellant 
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hi \it\v of ihi, aigumenth ma.de hetemabo<. t_, an\ such inherent \ diauincnl has been adequ.Ueh 
rebutted and a nonce of allowance or a specific prior art showing of such claim featuies in 
combination with the it-maming claim dements is tesptxilulK tequested <See MPH* 2) 12) 

A gam appellant respectfulh asserts that at least the first and thud elements of die pmua hu ie 
cast, of obviousness ha\e nut been met <is noted above 

Issue #3: 

I he Lvimsner has j ejected Claims 2 S lo 22 30 and «i under ^ I S( l<n{a> as being 
unpatentable o\ei Kephaif U S Patent No ^ 4^2 442) in view of S,oi f Had ID! V X m futthei 
view of Simpson ( 'C rvptogiapln tn Hendav lite") 

(rump / Chnw\ 2 <V ifr 22 So and 36 

\ppdldnt icspettfulh asserts that such claims are not met b\ the pnoi air tot the icasons digued 
with respect to Issue "1 Group "1 and Issue ~-2 Gioup ^ 1 

\gam, dppL.ll ant lespeafiilh asseits that at least fliL fust and thud elements oi ihc jvimi him' 

case of obviousness have not been met. as noted above. 

Issue.# 4- 

Ihe t-vimmcr has ujeucd < laims ^ i ( > and undet i ; l SC iO^ta) as heme unpatentable 
o\et Kcphast tl S Patent \o > £^2 4 £2) in (tnthei view oi \ el Jinan f Heunstie \nti~\ mis 
Iechnologv "'). 

Group # ./; Claims 5, 19, and 33 

WHh respect to Claims 5, 19, and 33, the Examiner has relied on Section i, and Section 2.1 from 
the Veldman reference to make a prior art showing of appellant's claimed technique "wherein 
said banned program identifying data includes heuristic data identifying at least one behavioral 
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ehataetenstie of at least one computet pioL.ra.ni banned ftum use such that sanauts of said at least 
one compute} piogiam banned ftom use mat shate said behauotal cnaracfotisitcs mas also he 
identified. 

Appellant respectful h asset ts that the cv^eipts ftom \'eldt)ian tolled upon h\ the fvamfner 
tneteh disclose that ' ft]hc woiri heuusfie' means (accouhng to a Dutch dictionan ) the self 
finding and the knowledge to detejmme something in a methodic was (Section 2 0 Fitrthei, 
\cldman discloses that "fa] heuristic seannei is a type of automatic dehuggei os disassembler" 
whoie "[t|he itisttuctions ato disassembled and then purposes ate determined 1 (Section 2 1} In 
addition Yefdman discloses that ' nosma! progiams hpicailv stait seasoning the command itne 
for options cleaitma the scteen etc where \ if uses ' stait with a search for othei executable files, 
b\ writing to the disk, 01 b\ dec ivptmg them sehes" (Section 2 i) 

Howe\u the mete disclosure of using a heuristic scanner to detoimme if the msnuctions ate 
acting in a manner consistent with a Vitus, such as cheei-iny fot other executable files, wntmg to 
disk oi deenpung themselves as in \eidmaii, sunph fads to even suggest a technique 'wherein 
said banned piogiam identifying data includes heuristic data tdentif\n)g at least one heha\ioral 
characteristic of at kasf one compute! program banned irom use such that \aiiants oi said at least 
one computes piogtam banned from use that share said behasioial characteristics ma\ also be 
identified' (cmphasts added), as claimed b% appellant CIcaiK, suggesting the use of heuristics 
to detect instructions inuieati\e of a \uus as in \ cluman, sunph fails to suggest that the 
'banned piogram identifying data includes heuristic data identifying at least one heha\iorai 
characteiistic ' (emphasis added) in the mannei as claimed bs appellant 

Agam, appellant tespeetfulty assetts that at least the fust and thud elements of the fuma fat u- 
case of ob\ tousness hav c not been met, as noted abov e 

Issue # 5: 

The F\aminct has t ejected Claims 10 ">4, and vS undet ^ 1 S C JO Ha) as being unpatentable 
over kephatt (I S Patent \o * 4^2 442) ni Mew of S/oi ( Bad ID! A'}, in uew of Simpson 
(' Crvptogiapln m t vers das Life } and in futthei Mew of Daustl S Patent \o 5 S44 °So) 



( iro/ip •• /; Claims 10, 24, and 38 



With respect to the first element of the prima facie case of obviousness and, in particular, the 
obviousness of combining the aforementioned references., the Examiner has argued that "fo'jne of 
ordinary skill in the art would have been motivated to perform such a modification to prevent a 
virus from corrupting the identifying data, as taught by Davis (coi. 1, lines 32-45 & 63-67) '' To 
the contrary, appellant respectfully asserts that it would not have been obvious to combine the 
teachings of Davis, with the Kephart, Szor. and Simpson references, especially in view of the 
vast evidence to the contrary. 

For example, Kephart relates to 11 fa] method... to extract and or evaluate a signature of a 
computer vims or other undesirable software entity" (Abstract), Szor relates to the analysis of 
"IDE A. 61 55 [which is] a polymorphic virus with three layers of encryption 0 (Page IS, Paragraph 
3), and Simpson relates to receiving a message encrypted with a private key which may be 
decrypted with a public key (Section 1), while Davis relates to "fa] cryptographic coprocessor 
containing the BIOS memory device f which] performs authentication and validation on the BIOS 
upgrade based on a public/private key protocol 1 ' (Abstract). To simply glean features from a 
cryptographic coprocessor containing the BIOS memory device, such as that of Davis, and 
combine the same with the non-analogous art of a method of evaluating signatures of computer 
viruses, such as that of Kephart, a polymorphic vims, such as that of Szor, and private and public 
!>.?v..ejicryj)iion, such as of Simpson, would simply be improper. 

in particular, cryptographic coprocessors containing BIOS memory impose an authentication and 
validation procedure before the contents of the BIOS flash memory are modified (Davis - Col. I, 
lines 65-67), while virus scanners evaluate signatures of computer viruses, polymorphic viruses 
use encryption, and public key cryptography uses private and public keys to encrypt and decrypt 
messages. "In order to rely on a reference as a basis for rejection of an appellant's invention, the 
reference must either be in the field of appellant's endeavor or, if not, then be reasonably 
pertinent to the particular problem with which the inventor was concerned." In re Oetiker, 977 
F.2d 144.3, 1446.. 24 USPQ2d 1443, .1445 (Fed. Cir. 1992) See also In re Deminski. 796 F.2d 
436, 230 USPQ 313 (Fed. Cir. 19S6): In re Clay, 966 F.2d 656, 659. 23 USPCCd 1058, 1060-61 
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fFed Cir. !'? c >2}. In view of the vastly different types of problems a cryptograph 
^i ; \O^A!I?iAH.BJD.S../I\^!A1.0iy addresses as opposed to a yi.rus.scanner = _poj^ 
K^i'..£0'P.V^S"3pI]X- ^ Examiner's proposed combination is inappropriate. 

Further, with respect to the third element of the prima facie case of obviousness., the Examiner 
has relied on Col. L lines 32-45., and lines 03-67: and Col. 2. lines 1-7 from the Davis reference 
to make a prior art showing of appellant's claimed technique "wherein said decrypted banned 
program identifying data is stored within a secured memory region once decrypted." 

v In this, xe^ptsct, BIOS implemented m SPROM is resistctnt to virus 
.attack and other electronic sabotages - <. ^ , M _ - 



■*,!-> * x , BIOS flash 

vulnerable to virus attacks ^ t < h 



corrupting the BIOS by a computer virus. achieved by imposing 

an authentication and validation procedure before the contents of the 
BIOS flash lEtamory ar« modified ' , 5 t t ^ ^ 



^ ^ v ^ i incorporating the BIOS flash 

existing hard^ctre with authenticating capability such 
cryptographic coprocessor <■ 1 <r v. „ N *. , 1 N „ v. v. 



\ppell.uu lespetttulls asserts that the exceipts horn Daws raited upon b\ the ( \ammei much 
di^iosc that BIOS implemented m i I'ROM is icsjstant to \srus attack and othes elections 
subntdirts and PiOS Hash mtmoncs ate uilnerablt to vstus attacks <emphdsis added) 
Furthu Da\ts disdoses that tn otdu to pi event tomiptmg the BIOS b\ a compute) \nus an 
authentication and validation ptocedutc [is imposed] before the contents ol the BIOS Hash 
memory are modified b\ tncoipotarmg the BIOS tlash memories into existing h.nduaie with 
authenticating capability sikh as the cr\ ptogiaphtc topuKCssoi (emphasis addtd) 
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lfoue\ei the mete di selosur e that flash memois BIOS, which is vulnerable to \isus attacks ts 
incorporated into easting hardware with authentication capability m order to authenticate ami 
validate before {lie contents of BIOS Dash memot\ aie modified, as m DaMs, stmplv fads to 
suggest technique 'wht-iem said decrypted banned pi obtain tdcntsn mg. data is stored within a 
scouted memoo tegion oikc dccuptecS' (emphasis added), as darmcd h\ appellant OieatU 
Iwndwaie providing authentication and \aiidatioi) before a BIOS flash memors is modified as m 
Da\iS, stmpK fails to even suggest that ' decs >pted banned piogiam identifying data is stoied 
within a sccuied memosx region once dempted' (emphasis added), in the man net as claimed b\ 
appellant. 

Warn, appellant respectfully asserts that at least the tlist and thud elements of the /» tma fiKie 
case of obviousness have not been met, since tt would be nm>b\inu\ to combine the refeiences, 
as noted abo\e and the pttoi an reteiences, when combined, fail to teach ot suggest all ol the 
claim limitations, as noted above 

Issue # 6: 

Tfu r,\amitK-t has K]ected Harms 11-12, 25-2o, and >°-40 utidet Si HM{a> as hung 

unpatentable over Kephatt {I S Patent No 5 452 442) in v tew of S\ mamec ( \oiton \nti\irus 
User's Guide"). 

(Troup /. Chums //, „"*.\ dtiJ 39 

With respect to Claims Si, 25, and the Psammei has relied on Pages .VMfi from the 
Symantec reference to make a prior an showing of appellant's claimed technique ' whetein when 
a banned computet ptogram is ideutiiied, at least one banned ptogiam action is triggered, said 
banned progiam action comprising at least one of u) issuing an alert message indicating 
identification of a banned computer program (in denung access to said banned computer 
program, nil) encrspting said banned computer program, and (n) deleting said banned computet 
program." 
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Appcllant tespc-ulnUy assetts that the excerpt from Symantec telied upon b\ the Fxammei 
merel\ discloses that [wjhen Norton XnfiYnus finds a \uus has infected a Hit* on \ottr 
computet, it produces a wanting' (Page 40 emphasis added! llowe\et, the meie disclosure of 
ptouuemg a warning when a \uus has infected a file as m Symantec, simply fads to even 
suggest a technique "whet em when a banned computet ptogt am is identified, at least one banned 
program action is triggeted' (emphasis added) m the manner as e Mimed h\ appellant Clearh, 
finding a vuus that has infected a fife as in Svmantec, hxkIks una\ ftom appellant's banned 
computet piogiairT which ' v tompus[e»| a non-Mius computet piogiairT (see Claim I foi context 
- emphasis added), in the context as claimed by appellant. 

Again, appellant respectfully asserts that at least the first and third elements of the prima facie 
case of ob\ iousnes.s ha\ e not been met as noted abo\ e 

drowp w2: Claims 12, 26. and 40 

With aspect to Claims 12 2o, and 10 the bxamincr has relied on Pages 1 1, and 18 fiom the 
Symantec teierenee to make a pnoi art showing ol appellant's claimed technique 'whet tin said 
ami compute! \uus logic aspotisis to an absence of said user generated banned piogiam 
identifying data by peiibtimng at least one of u) issuing an aleit message indicating an absence 
of said usei generated banned progtam identifying data, (h) restonng said user generated banned 
prom am identify m*: data fiom a remote souice. On) disabling a computet upon which said anti 
computet mius logic is executing 

Appellant sespectkilK asserts that the exceipts from Symantec relied on bs the Pxammet merely 
disclose that 'Norton \nrj Virus iche* on up-to-date mfoimation to detect and eliminate \iasses * 
and 'fo|ne of the most common jeasons sou ma\ base a unis problem is that \ou have not 
updated \oui Mais ptotection since \ou put chased the product" {Page H) 1 uither Symantec 
discloses to l [e|hek the inelpdate button to update Noilon Ami Vitus piogiams and \itus 
protection" (Page 18) In addition. S\mantee discloses that 1 1 i\eCpdate connects to S\ mantec 
to see if updates ate availabk fot Notion AntiNtius and also checks lot updates to voui \irus 
ptotection' {Page IS emphasis added) 
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Ifouexes ihi, mete diseiosuie that t r\ el pJdt», connects to Ssnumei. to see if updates die. 
asadahle fos Norton '\uttYuus and also checks foi updates to \om \uus ptoteUton as m 
Mmantec, simph fads to Mi^est a technu|ue wheiem said ami compute! \uus logic iesponses 
10 an absence of said usci ^enctated banned puuiram idcntif\imi data' (emphasis added) in the 
manner as claimed b\ appellant Heath, updating \uus ptotectton \ ja LtveUpdate, as m 
Mmantec does not meet an absence oi said user generated banned pioyiam identiisin^daur 
(emphasis added) in the mavmei as claimed bv appellant 

\gam, appellant itspectfulh asserts that at least the fitst and thud elements of the />////?(/ Uu ic 
case of oh\ tousness ha\ e not been met as noted abo\ e 

Issue # 7: 

The Examiner has rejected Claims 6, 14, 20, 28, 34, and 42 under 35 U.S.C. 103(a) as being 
unpatentable over Kephart ("U.S. Patent No. 5,452,442), in view of McGee et al. (U.S. Patent No. 
6,694,434). 

Group 1U: Claims 6, 14, 20, 28, 34, and 42 

With respect to the first element of the prima facie case of obviousness and, in particular, the 
obviousness of combining the aforementioned references, the Examiner has argued that ; it 
would have been obvious to one having ordinary skill in the art at the time the invention was 
made to modify Kephart so that the banned program identifying data identifying permitted 
eompute[r] programs with ai! computer programs not matching a permitted computer program 
being identified as a computer program banned from use'' and that l '[o]ne of ordinary ski 11 in the 
art would have been motivated to perform such a modification to protect a computer against 
inadvertently downloaded unauthorized programs, as taught by McGee (col. 2, lines 35-41 & col. 
3, line 64 - col. 4, line 4}.'" To the contrary, appellant respectfully asserts that it would not have 
been obvious to combine the teachings of McGee, with the Kephart reference, especially in view 
of the vast evidence to the contrary. 
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for example, kephart relates to "[aj method to extract and 01 evaluate a signature of a 
computet virus or othet undeshable soihvate entrtv" ( \bstraci), while MeGte relates io a 
"sWem and method foi eon trolling piognim execution for a lirst-partv' (Co! 1. lutes o-l-f>5> To 
simph glean features from a method lot controlling program execution , such .is that of \3cGee, 
and combine the same with the mm-^imfo^ims arr of a method of evaluating signatures of 
computet \ hmes . would stmph be itnptoper 

In particular, in a method for contiolhng program execution, the v ~first-pam system giants 
program exeeutabiiits on a pes -program basis based on the comparison of the pre-stoied hash 
values and hash value generated be the paitv having the piogram designated for execution' 
(McGee to) 2, lines. 2o-30 emphasis added), vvhiie vims scanners exUact and e\aiuate 
signatutes of computer uriscs, as m Kephart "in order to reh on a teferenee as a basis tor 
rejeuron of an appellant's invention, the reference must either be m the Held of appellant's 
endeavor or, if not. then be ieasonabh petti item to the paaieuiai problem with which the 
ins enter was concerned " in je Oetikei, ^77 i 2d 144 S 144o, 24 CSPCOd 1443, 1445 (Fed Cii 
i<-><>2) See ako in re Deminski. 7% V 2d -Ho. 230 I SPO 31 5 (H-d Cir I'W.). in re Cla\, "do 
r 2d f^o, 23 t SPQ2d I0s$ I0r>0-oi {Fed Cir fO<>2> it) view of the vastly different types 
of piobiems a method for controlling progiam execution addresses as opposed to a vtius scanner 
the Examiner's proposed combination is mappiopriate 

■\gatn, appellant tespectfuhv asserts that at least the first and third elements of the pinna A/we 
case obliviousness ha\e not beet) met. as noted above 

Issue # 8: 

The Examiner has rejected Claim 43 under 35 U.S.C. 103(a) as being unpatentable over Kephart 
(U.S. Patent No. 5.452.442). in view of Lavasoft ("Ad-aware"), and in further view of Fuller et 
al (U.S. Patent No. 6,216.112). 

Group MI: Claim 43 
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Wuh lesjx-et to the fitst element oi the pnma facie case of ob\ sousness and, m particular, the 
obviousness oi combining the aforementioned references, the I sannuei hdt argued that it 
would have been obvious To one bav mj: ordm«n\ skill m the art at the tune the j mention was 
made ro funhei modifs kephart ro use the anti-virus software to ifmo\e data streaming 
piosnams ' and Hut 'jojne of oidmatv skill tn the an would have been motivated to pfttWni such 
<i modification because advvaie streams day as taught bv 1 ullei (abstract)' lo the contrdtv, 
appellant respectful I v asserts that it would not base been obvious to combine the teachings of the 
Hdler, with the kephait lefeienee, espeeialh in view of the \a»t evidence to die contian, 

For example Kephait i elates to "[a] method to extiact and or evaluate <i signature of a 
compute) virus ot othei undesuable software emits (Abstract), while 1 uiiei i elates to 'juj 
method and »wem foi offeung and distributing softwaie wherein ad\ erti sements are 
incorporated into the softwaie product' < Abstract) wheie '[a] tednue-al advant rg:e adne^ed with 
the invention is the abiluv ;o couple advertisement softwaie with a sepaiate suthvaie piogram' 
(Col 4. lines 5f*-5S) To sitnpK it lean features from a method foi distributing soil w ate with 
advertisements incorporated into the software pioduct such as that of Htllci and combine the 
same with the ;/o/>-< i<t<i/> >e~<'/n atf^Wi method nf e\ aluatnrg srgnatuics of cotnputei finises , sueb 
as that oi kephart, would simph be improper 

In particular, distributing software with advertisements incorporated into the suftw.n e product 
allows foi softwaie authors to he compensated for ever \ cops of the software being used fuller 
OI 4 hues So-of } while virus scanners evaluate signatures of computet viruses "In otdet to 
i eh on a reference as a basis for rejection oi an appellant's invention the reference must either 
be in the field of appellant's endeavor or. if not. then be leasonabh pertinent to the paincuiai 
piobiem with which the imentoi was concerned" In ie Oetikei, 07 7 I- 2d 144 v i 446, 24 
lSPQ2d 144>, 144s ( rcd Ur ]W2) See also in ic heminskr 7>>6 r 2d 136 230 I'SPO >H 
(Ted Cu logo). In re CLis 1 2d ^o 65^, 23 TSPQ2d 1058. 10o0-6i (I ed t'n 1°^2) In 
view of the \asth diffeient hpes of problems a method for distributing software with 
advertisements mcoipoiated rnto the softwaie product addresses as opposed to a \ uus scanner , 
the Examiner's proposed combination is inappropriate. 



A gam, appellant tespeetfuHv asserts that at least the tlist and thud elements of the puma fat a- 
case of ohv luusness ha\ e not been met as noted ahov e 

Issue # 9: 

1 he \ vanimet has {ejected Claim 44 under ^ I ^ C iO"i(<j> as bemg unpatentable u\ei Kephatt 
ff r S Patent V» 5 452,442) m Mew of Lavasoft f 'Au-aw are") ui \ie\s of Fuller et al (I S 
Patent No <» 2I<>,U2>, and ut further \ai\ ofBsowneiai fl S Patent No *> 8*«J,9<»8) 

Gr/w/> #7; C/azm ^ 

Wnh tespect to the first element of the puma tacie case of obviousness and m partieuiat, the 
obviousness ol combining the aforementioned ieferetu.es the Fxammei has argued that it 
would have been obuous to one having oidman shtl m the ait at the tune the invention was 
made to modih kephart siieh that the non-Mi us ujmputei piogtams fuithei include games 
wht-ic [o]ne of oidmarv skill m the art would ha\e been motivated to pcifoim such a 
modification to enable empowers to pi event the addition of the games to eiuplovec computet s, as 
taught hv Blown {eul 4, lines jO-12}" 3o the eonfutv appellant lespectfuiK asserts that it 
would not have been ob s sous to combine the teachings of the Biown, with the Kephatt refeience, 
especudh in mow of the vasi evidence to the contrarv 

Tot example, kephatt lelates to * [a] method to extract and oi evaluate a signatute of a 
computer \uus oi otiiei undesirable software enutv ' f AbsttacO while Brown teiates to * jaj data 
secuntv device los a computet ssstem |that) eouttoU the addition and removal of data using <*n 
externa! data drive" wheie 'ffjhe access conttoller selectively makes ot bteaks an electrical 
connection between the powet suppK and the external data dme to prevent the addition ot 
removal oi data ftom the compute! sv stem using the external data dme" ( \bsttactt To simplv 
dean featutes fuim an access comiollei. such as that ot Blown, and eomhme the same with the 
nfti-ofta/oww* an of a method of evaluating signatures of computet vmiscs such as that of 
Kephatt, would simply be improper. 
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hi paitiujlai, an aeeess control ki makes or bseaks an eketneal connection betueen the ponet 
supph and the extendi data time to pre\ent the addmon or temosal oi data from the external 
data dme, \Uule \uus scanners evaluate srgnatines of compute! \uuses "in order To rel\ on a 
lefcience .is a basis tot (ejection of an appellant's invention rhe leference must cithci be in the 
Held of appellant's endcasot ot, tf not then be reasonable pettmeru to the patticulat problem 
with uhfUithe mxentot \sds uirKeuied " InreOetiket ^77) 2d 1443 544o 24 \ 'SPQ2J J 443, 
1445 cl-ed Cu 1^2) See also In le Demmski, 7*. I- 2d 43o, 230 I SPQ 3i3 <i-ed ru \<m\ 
lnie(la\ ( >ooF2d0 < >o 2^ LSP02d 10*8 t0o0-bl (bed Cu 1^21 In \?e\\ ot the uisth 
different t\pes of pt obi ems an access, control lei addresses as opposed to a \itus scanne: the 
I \ammef s proposed combination is mappiopnate 

\aain, appellant lespeettulK asseits that at least the fust and thud elements of the pntihi fatie 
ease of ob\ lousness ha\ e not been met, as noted abo\ e 

Issue #10: 

The Examiner has rejected Claim 46 under 35 U.S.C. 103(a) as being unpatentable over Kephart 
(U.S. Patent No. 5,452,442), and in further view of Golds efc ai. (U.S. Publication No. 

2001/0020245). 

Group ill: Claim 46 

With respect to Claim 46. the Examiner has relied on Paragraphs 0003, 0008, and 0031 in Golds 
to make a prior an showing of appellant's claimed technique "wherein an anti-virus scan is 
performed when a file access request is received, and if said anti-virus scan is not passed, an 
arui-virus action is triggered and a fail response is returned to an operating system, and if said 
anti- virus scan is passed, a scan for the computer programs banned from use is performed.'" 

Appellant respectfully asserts that the excerpts from Golds relied upon by the Examiner merely 
disclose that "[sjoftware modules such as file system filter drivers may be stacked or otherwise 
arranged linearly (eg., chained ), and perform their operations in the order in which they are 
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stdckcd (emphasis ad<i»,<i} \dditionali\ , Golds discloses that 'the dm as can mteieept IRPs 
[ti O request packets)], and inodifi, lefum and'oi cancel then) * (emphasis added) 

However, the mere disclosure that file system filter drivers may be arranged linearly and that the 
dmeis can nuetcept, modffv, return, and-'oi cancel IRPs, as i» Golds, fails to c\en suggest a 
technique wherein an anti-unis scan is pet fojmert when a file access lequest is iceened and if 
said antt-\tuts scan is not passed, an auu-\srus actum is triggered and a fad response is jeturned 
to an operating sxstem and if said anti-uius scan is passed a scan fbi the computer piogiams 
banned fiom use is perfoimed' (emphasis added), as claimed b\ appellant C leaiix, the exeeipts 
ftom Golds lehed upon b\ the Fxammei lad to e^en suggest that 'if said anti-\inis scan is 
passed, a scan for the compute! programs banned fiom use is peifoimed (emphasis added), as 
claimed bv appellant. 

In addition the rammer has at yued that'll is inherent in Kephait that all signatures wdi be 
scanned and therefore, if one signature does not match a file, the next will he checked jand 
that] since kephart scans a file with tespect to \uus and non-Mixis tiles, u is mheicnr that when a 
\uus signature docs not match the file being scanned the file will be scanner ot the remaining 
stgnatuies at least cnie eonespondmg to a non~\ nub file ' Appellant respect fulh disagrees with 
the Fvammet s mSiuenes arguments and asserts that kephart inereK discloses tliai 'the 
rmention has been deseubed m the context of methods and apparatus for evaluating and 
extracting signatures oi compute! \ buses and othei undesirable software entities 1 (Col IS hues 
17-20 emphasis added) llouexei there is no indication fiom the uted evcerpt that 'ti one 
signature does not match a file the ne\t will be checked, and ' when a \ itus signature does not 
match the trie being scanned the file will be scanned tbi the remaining signatmes, at least one 
eonespondmg to a non-Mius file " as stated b\ the Fvammer Uearh e\a.iuaiing signatures oi 
computer \uuses and other undesirable soitware entities, as m kephait, simpK fails to 
specificalb suggest that 'ti said ant)-\irus scan is passed a scan for the compute! progiams 
banned from use is performed" (emphasis added), in the manner as claimed by appellant. 

Appellant asserts that the fau that a ceitam result or characteristic max oceiit ot K pa sent m the 
ptiot art is not sufficient to establish the mherenex of that icstilt ot characteristic //; jv KiuLvti 
*t id M31 1534 28 1 M>Q2d l^\ 1^7 (Fed ( ir 1W) In ie OdnJi ooo F 2d ^8 
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82, 211 t SPQ 323 >2<i fCCPA 1^80 Thus Jt ti. not mlim-nt in kephart thar if said anu-\iriis 
sum is passed d scan for tltt* computet punzrams banned fiom use is per loaned' tunpbasm 
dddedt. m {he nunnei ds claimed b\ dppellam 

Agdtn appellant respect fu!l\ duetts that at least the first and thud elements of die pmmi hu ie 
cast. of obviousness ha\e nut bei.ii met as noted rfbove 

In uew of the re-mat ks set t'osth hcreitiabo\ e, all of the independent claims are deemed 
allowable, along with any claims depending therefrom. 



VIII CLAIMS APPENDIX (37 C.F.R. § 4137{c){l)(viii)> 



The text of the claims involved in the appeal (along with associated status information) is set 
forth below: 

5 (Prexioush Presented) \ computet ptogiam product compttsmg a computer ptogtam 
operable lo contiol a computer to generate banned piogram identifying data mdicatn e of at least 
one computer program to he banned from use, satd computer progtam tompustng 
( \ ) user controlled program specif* nig logic operable to sptuh said at least out- computer 
ptogram to be banned ftom use sard at least one computet piogtam eompnsmg a non~\iius 
computer program; and 

( u1 banned progtam identifying data genesatmg louse tcsponst\ e to sard user contt oiled 
ptogtam specify mg logic to generate banned ptogram ideuttfs tng data tot said at least one 
computer progtam to be banned irom use sard banned program tdetmf\ tng data being opeiable 
to coiittol ami computet \iius logic to identify computer protuams banned from use. 

wherein the anli computer \uus Some identifies eomputer uiusespnor to identifying the 
computer programs banned from use 

2 (Oiigmal) A computet ptugtatn ptoduct as claimed in claim 1 wbetein said banned 
ptogram klentifwng data is eoervpted with a pmate ke\ 

3. (Cancelled) 

4 (Pre\ rousts Presented) A computet program product as claimed in claim 1. wherein said 
banned progtam identifying data contioU i>aid ami computet virus logic to ideniitv said computer 
ptograms banned fjom use in a manner substantially tlie same as if thes were one of the 
computer viruses. 

5. (Previously Presented) A computer program product as claimed in claim 4, wherein said 
banned program identifying data includes heuristic data identifying at least one behavioral 
characteristic of at least one computer program banned from use such that variants of said at least 
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one computer program banned from use that share said behavioral characteristics may also be 
identified 

6. (Original) A computer program product as claimed in claim 1, wherein said banned 
pros/i am identUwng data comprises data idcntirv tag peimitted computer piograms with all 
computet programs not matching a penrntted computet piogram being identified as a computet 
program banned from use. 

7 {Preuoush Presented) \ computer program product comprising a computer ptogjaru 
opeiable to control a computer to ban fiom use at least one computet program said at least one 
computer progiam comprising a non-srrus computer piogram. said computer piogram 
comprising: 

(J) atits computer viais iogrc responsive to user generated banned piogram rdeutsfs mg data 
for said at least one computer program to be banned from use to tdennfx computer programs 
banned from use; 

w herein the ants computer \ bus logic identifies computer \ muses pnor to identif\ mg the 
computer programs banned from use 

8 (Ongmal ) A computes prugtam product as claimed m claim ~\ wherem sard banned 
program identrfung data is encrypted with a pmate kev and said arm computer vmis logic uses a 
corresponding public key to decrypt said user generated banned program identifying data prior to 
use. 

9. (Cancelled) 

10. (Original) A computer- program product as claimed in claim 8, wherein said decrypted 
banned program identifying data is stored within a secured memory region once decrypted. 

1 1 . (Previously Presented) A computer program product as claimed in claim 7, wherein when 
a banned computer program is identified, at least one banned program action, is triggered, said 
banned program action comprising at least one of: 

(i) issuing an alert message indicating identification of a banned computer program; 
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( n) den\ ing access to said banned computer program, 
(tn ) enct\ ptmg said banned computer program, and 
(n » deleting said banned computer program 

!2 (Otigtnai ! A. computer program ptoduct as claimed in claim 7, wherein said antt 
compute! muis logic responses to an absence of said user generated banned program identifying 
data b\ performing at least one of 

(i ) issuing an alert message indicating an absence of said user generated banned piogiam 
identifying data; 

fts ) restoring said user geneiated banned progtam tdentsf\ sng data from a t emote souiee 
(mi disabling a computer upon winch said anti computet sirus logic is executing 

! i (Oiigmai } A computer program ptoduct as claimed in claim 7, u herein said anti 
computer \ irus logic is executable as a separate instance solely to identifv computer programs 
banned from use. 

S4 (Original) \ computet program product as claimed tn claim 7 wherein said use! 
gem rated hamud program tdentifxmg data compttscs data tdemif\int. f permitted computet 
progiams with at! computer piograms not matching a petmitted computui piogtam being 
identified as a computer program banned from use. 

1 5. (Previously Presented) A method of generating banned program i dentifying data 
indicative of at least one computer program to be banned from use, said method comprising the 
steps of: 

1 1 5 usei speufs ing at least one computer program to be banned from use, said at least one 
computer piogram comprising <i non~\ n us computer progtam, and 

(n) genetatmg banned ptogtam identih ing data for sdid at least one computet ptogtam to be 
banned front use said banned ptognim jdentii\uua data being opeiabk to control anti compute! 
\irus iogic to tdentirv computer progiams banned ftom use, 

wherein the arm computer \ttus logic identifies comnukr \uuses prior to ideuttfs mg the 
computet piograms banned ftom use 
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io (Of igiiia.1} A method as claimed in claim 1 *>. whet em said banned progiam identify iug 
data is enenpttd with a pitvatt ke\ 

17. (Cancelled) 

IS (Preuoush Piesented) \ method as claimed in claim 1^ whet em Mid banned piogiam 
identifying data conuols said atiti computei s mis logic to identify said computet pjogiatns 
banned fiom use in a mannei substantial K the »ante at. if the\ yseie one of die computet \mtses 

i 4 ; (Pie\ioiisl\ Presented) \. method as el at mod in claim 1-S w heietn said banned pjogi am 
identify inu data includes heuusuc data identify mg at least one beha^ total chaiactemtic ot at 
least one computet pi op am banned fiom ut>e such that \anant» of said at least ojio computer 
piogiam banned fiom use that sbate said behas total ehaiaUeitstus mas also be identified 

2u (Oiiyinal) \ method as claimed in daim 1 * \y herein said batined ptogram identifying 
data computes data identifying peumtted compute) ptograms yyith ai! computei piogumis not 
matching a petmitted computei piogiam being identified as a computet piogiam banned fiom 
use. 

21 ( Previously Presented) A method for banning ftom use at least one computer program, 
said at least ojk computer psogtam comprising a non-Mais computet progiam satd method 
comprising the step of. 

ft) in tespon.se to lecemng usci geneiated banned piogiam identifying dat<! ibi satd at least 
one computer piogiam to be banned from use, operating anti computei s iius loeic to identify 
computer piogramus banned fiom use tot tiiugeunu a banned ptouiam action, 

whetein the ditti computet \m\i> logic identifies computei <■ buses piioi to identifying the 
compute; piogtams banned from use 

22 (Oiiginal ) \ method as claimed in claim 2], wlseiem said banned progiam identifying 
data is enenpkd uith a pmak l.u\ and said ant? computet yttus logic ust.s a eonespondmg 
public key to duejypt said usei genemtui banned piogiam identifying data piiui to use 



-40- 



23. (Cancelled) 

24 (Ongmal ) \ method as claimed m claim 22, wheiem said decrypted banned piouiam 
identifying data is stoied within a secured memory region once ueciy pted 

2 s (Preuoush 1 tesented) \ method as claimed in claim 2 i wheiem when a banned 
computer piogram is identified, said at feast one banned pi oat am action is triggered, said banned 
proaiam action comptisuii: at least one of 

( i ) issuing asi alett message indicating identification oi a banned computet progtam. 
f tf ) Jem mg access to said banned computet piogiam 
(m ) t-nci \ plf nt> said banned computet ptogt am , and 
( t\ } deleting said banned eomputei piogram 

2o (Ongmal ) A method as claimed in claim 21 wheiem said ami compute! vtius logic 
lespottses to an absence of said usei geneiated banned ptogt am identifying data by pet forming at 
least one of: 

( t ) issuing an alcit message indicating an absence of said use: generated banned progtam 
identifying data; 

Ui) lestotmg said usei geneiated banned piogram identity mg data itom a i emote suuice 
( ui ) disabling a computet upon which said anti computer \ mis logic is executing 

2" (Original } A method as claimed in claim 2 i whet em said anti compute! \ trus logic ts 
executable as a separate instance sole!} to identih compute) piogtams banned from use 

2H (Original) \ method as claimed in claim 2 i w herein said banned piogrant identify i tig 
data comprises data identifs mg peinutted computer progt ants w ith all computet programs not 
matching a permitted computet progt am being identified as a computer progt am banned bom 

use. 

29. (Previously Presented) Apparatus for generating banned program identifying data 
indicative of at least one computer program to be banned from use, said apparatus comprising: 



-41 - 



(\) a user control led program specifier operable to specify at least one computer program to 
be banned from use., said at least one computer program comprising a non-virus computer 
program; and 

(u) banned piogj am identsn mg data gene i ator i esponsn e to said use: controlled ptoutam 
spcufit-i to genet ate banned progtam identtfung data f<n said at least one computet ptogtam to 
be banned from use, said banned pt ugtam idenftfung data being opetable to conhoi ant? 
computer wins logic to identii\ computet ptogiams banned Oom use 

wherein ihc ants computer \n us logic identifies computet \iaises pnot to ldentifustg the 
computet progtams banned from use 

■>0 (Ongmai > Appatatus as claimed ui clasm 2<K whesun satd banned progjam identifv mg 
data is enenpted with a pmate lc\ 

3 1 . (Cancelled) 

32. (Previously Presented) Apparatus as claimed in claim 20. wherein said banned program 
identifying data controls said anti computer virus logic to identify said computer programs 
banned from use in a manner substantially the same as if they were one of the computer viruses. 

33. (Previously Presented) Apparatus as claimed in claim 32. wherein said banned program 
identifying data includes heuristic data identifying at least one behavioral characteristic of at 
least one computer program banned from use such that variants of said at least one computer 
program banned from use that share said behavioral characteristics may also be identified. 

34. (Original) Apparatus as claimed in claim 20, wherein said banned program identifying 
data comprises data identifying permitted computer programs with all computer programs not 
matching a permitted computer program being identified as a computer program banned from 

use. 

35. (Previously Presented) Apparatus for banning from, use at least one computer program, 
said at least one computer program comprising a non-vims computer program, said apparatus 
comprising: 
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( i ) an ants computet <■ iRis s\ stem response e to user generated banned ptomam idcntifs tug 
data foi said al least one computer piogram to bt* banned from use to ideuith computet puigiams 
banned from use; 

whet em the ami computet \itus s\ stem identifies computt't \ituses ptioi to idcntifs mg 
the computer piograms banned ftom use 

3(i (( htgmal) \ppajatus as claimed m claim 3\ wheietn said banned piogiatn f dentils mg 
data us ettci vptcJ with a pmate ke> and said atitt computer \n us logic uses a couespondmg 
puhhe ke\ to deu\ pt said usei generated banned ptogiam identiising data prior to use 

37. (Cancelled) 

3S (Ongmal } Apparatus <i$ Uaimed m claim id, nheiein said decispted banned piogram 
identiising data is stored vsithtn a seemed memon legion once decrs pied 

>°- (PicMoush Ihesetited) \ppaiatus as claimed m claim ^ wherein when a banned 
computer program is identified, at least one- banned program action is triages cd said banned 
piotnam action computing at least one of 

(i ) issuing an alui message indicating identification of a banned computet progiam 
( ti > den\ mg access ro said banned computet piogiam, 
(in) enctyptmii said banned compute i piogfam, and 
d\ ) deleting satd banned computer piogfam 

4<i (Ongmai > Appaiatui as claimed tn claim 35. wherein said ami computer snus sxstem 
icsponscs to an absence of said usci geneiated banned piogram identifying data bs performing at 
least one of 

(i ) issuing dn aleil message indicating an absence oi said user gene; a ted banned piogtam 
identifying data; 

(ti) lestonng said uses generated banned piogram idemifx ing data from a remote source. 
Oil i disabling a computer upon which s<jtd autt compute! <■ nus logic is e\eeuttng 
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41 (OngmaJ) Apparatus .is claimed m tlnm 35 uliuem sa.td dtitt computet <■ iilis s\stem rs 
evecufahle as a sepatate instance soleh to identih computet progtams banned ftom use 

42. (Original) Apparatus as claimed in claim 3\ wherein said user generated banned 
program identifying data comprises data identifying permitted computer programs with all 
computer programs not matching a permitted computet program being identified as a computet 
program banned from use. 

43. (Previously Presented) A computer program product as claimed in claim L wherein the at 
least one non-virus computer program includes at ieast one of a game and a data streaming 
program. 

! 1 (Piewoush Ptesented) A computer ptogram ptoduU ds claimed m cidtm f, v\heietn the at 
Last one nun-\ nus computet ptogiam mdudcs games and data sti earning piograms 

4^ (PicMoush 1'iesented) \ computet pioinam product as claimed m ciami \ whejeinlhe 
antf computet \ nus logic of a piuralst\ of end itscts each includes a different selected set of 
computet piograms. banned {torn use 

4o (PieuousK Presented) V computer progjam ptoduct as claimed in claim ! wherein an 
ants-urns scan is performed when a tile access tcqucstns lecc-fved and if said anu-\nus scan is 
n<U passed, an anti-Aims action is tttggeted and a fat] tesponse is t etui tied an opemung s\stetn 
and if said anti-vims scan is passed, a scan for the computer programs banned from use is 
performed. 
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IX EVIDENCE APPENDIX (37 C.F.R. § 41.37{c){l)(ix)) 

There is no such evidence. 
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X RELATED PROCEEDING APPENDIX (37 C.F.R. § 41 .37(c)(l )(*)) 



N/A 
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In the e\ent a telephone cum elation would expedite the prosecution of this application, the 
f.xaminer may reach the undersigned at (408) 071-2573 For pa\ment of an\ additional fees due 
in connection with the filing of this paper, the Commissioner is authorized to charge such fees to 
Deposit Account No 50-1351 lOtdei No N-U1P-I58) 



Respectful ly submitted, 

Rv /KEViNZILKA/ D t February 20, 2007 



Kevin J. Zilka 
Reg. No. 4K42« 

Zilka-Kotab PC. 

PC) Box 72 1 120 

San Jose, California 95 1 72-1 120 

Telephone. (408)971-257? 

Facsimile: < 40$) 971-4600 



